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CLAIMS 

1 . An authentication system to verify a password, comprising: 
a first storage unit to store an authentication sequence; 

5 a read-only memory imit to store an authentication algorithm; 

a microcontroller coupled to said first storage unit, said read-only memory unit, 
and a web server, wherem said microcontroller is to receive said password and execute 
said authentication algorithm and wherein said authentication algorithm is to verify said 
password with said authentication sequence; and 

10 a second storage unit coupled to said microcontroller to store data from said web 

server and wherein access to said second storage unit is permitted by said microcontroller 
only if said password has been verified. 

2. The authentication system as recited in claim 1, furflier comprising a host 
15 coupled between said authentication system and said web server, wherein said password 

is received by said microcontroller firom said host. 



3. The authentication sj^tem as recited in claim 2, wherein said read-only 
memory unit fiuther comprises a. shutdown algorithm to shut down said host and said 

20 authentication system after a number of incorrect passwords is received by said 
microcontroller. 

4. The authentication system as recited in claim 2, wherein said password is 
received by said host firom said web server. 

25 

5. The authentication system as recited in claim 2, wherein said 
authentication algorithm is hard coded on one of a group consisting of a firmware and a 
hardware in said microcontroller. 
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6. The authentication system as recited in claim 5, wherein said second 
storage unit is a removable storage device. 

7. The authentication system as recited in claim 6, wherein said second 
storage imit uses flash memory. 

8. The authentication system as recited in claim 2, wherein said 
microcontroller and said read-only memory unit are implemented on a single 
semiconductor chip. 

9. The authentication system as recited in claim 8, wherein said first storage 
imit and said read-only memory unit are incorporated into said microcontroller. 

10. The authentication system as recited in claim 1, jfurfher comprising an 
encoder coupled between said microcontroller and said second storage unit, wherein said 
encoder is to encrypt data that is to be written onto said second storage unit. 

11. The authentication system as recited in claim 10, further comprising a 
decoder coupled between said microcontroller and said second storage unit, wherein said 
decoder is to decrypt data that is to be read from said second storage unit. 

12. The authentication system as recited in claim 11, wherein data stored in 
said second storage unit is hash-coded. 

13. The authentication system as recited . in claim 12, whereia said 
authentication sequence is encrypted. 
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14. The authentication system as recited in claim 12, wherein said 
authentication sequence is hash-coded. 

15. The authentication system as recited in claim 1, wherein said first storage 
unit is located within said read-only memory imit and wherein said authentication 
sequence is hard coded into said first storage imit 

16. The authentication system as recited in claim 15, wherein said second 
storage area fiuther comprises a public storage area and a private storage area. 

17. The authentication system as recited in claim 16, wherein said first storage 
unit is located within said private storage area of said second storage area. 

18. A method for authenticating a password, comprising: 
receiving said password; 

receiving data firom a web SCTver, wherein said data is stored in a storage unit; 
providing an authentication sequence; 

executing an authentication algorithm to verify said password with said 
authentication sequence, wherein said authentication algorithin is stored on a read-only 
memory imit; and 

permitting access to said data on said storage imit only if said password is 
verified. 

19. The method for authenticating a password as recited in claim 18, wherein 
said password is received firom said web- server. 
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20. The method for authenticating a password as recited in claim 19, wherein 
said password is entered by a user. 

21. The method for authenticating a password as recited in claim 18, wherein 
said data is encrypted. 

22. The method for authenticating a password as recited in claim 21, further 
comprising decrypting said data. 
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